Firefox3 User-Agent spoofing
Aka "How to use an online banking website by fooling them into using an unsupported browser".
Natwest check the User-Agent string of the browser, and block ones they dislike.
So, enter about:config in the firefox3 URL line, right-click on the list that appears, click on "New - String", enter general.useragent.override and for the string, enter one of the following common user agents:
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.12) Gecko/20080213 Firefox/2.0.0.12
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
Then check the result.
This method works with firefox 3.0b3-3.
Edit: Modify Headers does the same thing and works with firefox3, but is not necessary.
Last edited by brebs (2008-03-10 19:44:46)
xsdnyd wrote:general.useragent.override
Thanks, I've altered the first post to use that instead
CNN seems OK with a spoofed user agent.
Last edited by brebs (2008-03-10 20:11:46)
Similar Messages
-
Creative Cloud User Agent String spoofing old Chrome Browser?
Was troubleshooting Creative Cloud not working on our network and noticed it is spoofing an old Chrome browser User Agent String.
When Creative Cloud launches it presents itself as: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.68 Safari/537.22
This is the user agent string of Google Chrome version 25 (Chrome is currently at version 32)
Looking for any information on why Creative Cloud is using an old Chrome user agent string, and why can't it use a unique user agent?Creative Cloud chat support (all Creative Cloud customer service issues)
http://helpx.adobe.com/x-productkb/global/service-ccm.html -
Browser with spoofed user agent?
Hi, Does anybody know any -GOOD- mobile internet browser that can allow spoofing the user agent? I hate it when sites redirect to their mobile version based on the user agent of the web browser someone is using.
I know that Opera Mobile allows spoofing the user agent, but on many websites I am still being redirected to the mobile version.
I just want the full non-mobile version of the website, FFS.
Any help is appreciated. Thanks.Hm, nevermind, I think I have resolved the issue with Skyfire.
-
Trying to get Firefox to open in User Agent "Internet Explorer"
I run an Internet Cafe and have recently installed Ubuntu 10.04 over Micro$oft.
I HAVE to give customers an alternative to Live Messenger.
I have TokBox setup .. but gives problems now & then.
I need to cover all bases or lose customers.
The only viable alternative I have found is '''EBuddy'''.
Now the problem is .. when I log in using Internet Explorer and I connect to a contact - I can see the start video call "button".
Any other browser and the webcam button does not show.
All of the Firefox & Seamonkey User Agent Switchers I have tried work .. but I cannot expect the customer to know that they need to switch User Agent before they can use the webcam.
I need to Launch either Firefox or Seamonkey (preferably Seamonkey - if the fix is to be a permanent one) in Internet Explorer mode.
A permanent "fix" for Firefox was suggested on the Ubuntu Forum ...
1. Open about:config
2. Right-click, choose "New" > "String"
3. Type "general.useragent.override" (no parentheses) into the "New String Value" dialog box that appears and press "Enter." Type or copy and paste the desired new user agent string into the "Enter String Value" box (in this case "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)" )
When you're done, copy that Firefox profile to all of your computers (the .mozilla folder)
I tried this on Seamonkey .. but it did not have the desired effect = no start video call button.
There is a Proxy Tool add on for Seamonkey which can change the user agent and this works. Same thing for Firefox.
But the user agent is back to default on browser re-start.
In an ideal world I would like to create a Launcher on Ubuntu desktop which would open either Firefox or Seamonkey on the E Buddy sign in page and the User Agent would automatically be set to IE8 or 9.Try to set the user agent via a user.js file.
*http://kb.mozillazine.org/user.js_file
user_pref("general.useragent.override", "<IE user agent>"); -
Is there a way to change my user agent from Safari to Internet Explorer?
Hello All,
I need to fill out a application on line and it appears that it does not recognize Safari. Sounds like it needs to see IE. Anyway to temporarily enable IE for this application? Otherwise I have to go use a PC at the local library....
These instructions below in no way match my Snow Leopard 10.6.8 on my iMac - they don't make sense to me. Any help/guidance is appreciated to fill out this on-line form. Thanks!
Apple Safari
If using Safari, you must have Internet Explorer 6.0 or higher version or Firefox 2.0.0.12 - Macversion web browser at the "User Agent" category or higher for Firefox. Use the following instructions to configure your Safari browser to access e-QIP.
On the Menu Bar
Select Edit box (top of screen)
Preferences
Security
Accept Cookies (only from site that you navigate to)
Advanced
Check the box labeled "Show Develop Menu in Menu Bar"
Click proxies - Change settings box (Opens to Internet Explorer (IE) Properties Boxes)
Advanced tab
Security category is located near bottom of page
Click "Do not save encrypted pages to disk"
Click "Empty Temporary Internet Files folder when browser is closed"
Click/enable SSL 2.0
SSL 3.0
TLS.1
Exit Preferences Window
On Menu Bar select "Develop User Agent"John..
This may work but no guarantees ..
Launch Safari. From the Safari menu bar top of your screen click Safari. From the drop down menu click Preferences then select the Advanced tab.
Select: Show Develop menu in menu bar
Now from the Safari menu bar again, click Develop > User Agent
Try IE 7, 8, or 9. -
Hi,
I have a telerik rad popup window performing some input operation. The problem is when I use the configuration in IE as Document mode: 10 and User
agent String: Internet Explorer 8, scroll bars appear in the window from nowhere. It is working fine with every other configuration of IE. I've also used a separate stylesheet for IE 8 but it won't apply in this case.
Here are the screen shots of the window.
Actual view
With Scorllbar
Please if anybody could suggest a solution for this weird problem it would be a great help.
Thanks in advance.
NeeleshHi,
It seems we need to talk with the site developers to determine how the sheet would display with different IE user agent string.
Regarding the user agent string changes, please take a check with the following article:
Introducing IE9’s User Agent String
The Internet Explorer 8 User-Agent String (Updated Edition)
Hope this may help
Best regards
Michael Shao
TechNet Community Support -
ISE 1.2 Profiling - User Agent attribute incorrect
Hi all,
Just troubleshooting some profiling issues and have found that multiple devices are profiling incorrectly eg MAC OSX profiling as Apple-Device. Basically the issue is the user-agent string profiled by ISE is incorrect meaning that only the OUI is matched. During the BYOD onboarding process, non Internet Browser, applications and services (games and OCSP Daemons etc) are presenting their specific user-agent strings eg "OCSPD\1.0.2" to ISE resulting in incorrect profiling.
Does anybody have any suggestions on how to resolve this issue as it is resulting in about 50% of devices been profiled at the "top level" ie Apple-Device or Windows Workstation (anything based on User-Agent). Can any one explain whether profiler works on the basis of first agent received, last agent received and why it doesn't hold onto a list of presented agents to make a decision? In my mind this is a pretty big issue in that some of the more popular device profiling policies are based on a user-agent string thus potentially preventing you from defining tight Authz policies eg IPAD only etc"Unless you have suppression configured, ISE will continue to collect profiling data and will re-profile a device as long as a rule with higher certainty factor is hit. However, if the certainty factor is the same the device will remain at its originally profiled group."
The suppression feature will not affect the re-profiling of a device. The suppression only affects the logging on the MnT node. Since the Profiling is a PSN function the suppression has no affect on the outcome of a profiling event.
You are correct in that a rule with a higher certainty factor "wins" and this is the profile that is chosen. Again, an understanding of how profiles work is not the issue here.
For example say only the RADIUS and HTTP probes are being utilized for an endpoint. There are two endpoints one is a iPad and the other an iPhone. The endpoint attributes that are known about the device are the MAC OUI and the useragent.
Based on the default profiling rules there are two three things that need to be identified either an iPhone or an iPad. The first common item is that the MAC OUI is identified as apple. This increases the certainty factor by 10. The second is either the HTTP User agent containing either iPad/iPhone or the DHCP hostname containing either iPad/iPhone. Both of those conditions would increase the certainty factor by 20 for a total of 30. Since DHCP is not being used in this example we can remove that for a possibility and say that for an iPhone to be profiled as an iPhone it must both have a MAC OUI of apple and the useragent must contain iPhone. Same goes for iPad, but iPad in the useragent.
Like smcbridebpc stated every application that uses HTTP will have a useragent string. The profiler rules assume that the useragent that is being used contains either the word iPhone or iPad to distinguish these types of devices. If an application on the device sends a useragent string such as "OCSPD\1.0.2" which is obviously the OCSP Daemon. This useragent string is "stuck" on the endpoint and no other usable useragents can be used to profile the device. Therefore a race condition exists and depending on the application that wins determines if the profiler will be accurate or not.
The only two solutions that I can think of would be to have a useragent filter that would allow you to manually filter out useragents like "OCSPD\1.0.2" (or the ISE developers could filter known unusable user agents out on the backend) OR everytime a new useragent is presented to the profiler for a device the useragent is joined to a list of useragents.
If the useragent was overwritten everytime a new useragent was presented then it would cause the device to be reclassified everytime the different applications presented useragents which would not be good.
It does look like a bug may have been filed and marked as fixed in release pending, but the bug notes do not list enough information to identify if this is the same issue that we are seeing.
https://tools.cisco.com/bugsearch/bug/CSCuj45373 -
Hello,
We're currently on JDeveloper 10.1.3.4.0.4270. We just release a new version of our web app into production. This is an internal web application. application server is weblogic 10. The weblogic log is showing alot of these warning messages. I tried search on this forum and in google but unable to find any information. I really appreciate if anyone has any idea what could be causing these warning. Our users are constantly getting sent back to the login page to to user sessions lost.
<Jun 8, 2010 12:39:20 AM EDT> <Info> <Common> <BEA-000628> <Created "5" resources for pool "venusDS", out of which "5" are available and "0" are unavailable.>
Jun 8, 2010 12:39:20 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
Jun 8, 2010 12:39:20 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
Jun 8, 2010 12:39:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
Jun 8, 2010 12:39:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
Jun 8, 2010 12:42:21 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
1698656.832: [GC [PSYoungGen: 145280K->5811K(187264K)] 418915K->302441K(650112K), 0.1285455 secs]
Jun 8, 2010 12:42:22 AM oracle.adfinternal.view.faces.agent.AgentFactoryImpl _populateNullAgentImpl
WARNING: The User-Agent "Java/1.5.0_06" is unknown; creating an agent with null agent attributes.
Thanks,
JoeHi,
user agent is the browser users use. So what is the browser ?
Frank -
This is an old app to a server that will have no software updates. I can get logged in but when I try to go to any other page within the app it displays about 8 lines of WWWWWWW along the left side of the window followed by my username and message "Please wait page is loading". It never loads. App works with IE7 or older but have never successfully gotten Firefox 3 or 4 to work. Have had some success with User Agent Switcher Add On with some other apps in the past but it now doesn't show browser versions going back far enough to try them.
I can't guarantee anything, but there's a website that offers old versions of Firefox back to 0.8, so it should have what you need. :-)
http //www oldapps com/firefox php
Good luck!
edit: This is a unofficial download site and not safe. No need for it as Mozilla hosts all since beginning for public access. -
How to get iphones / ipad user agent for internet access
Hi.
We recently setup some wireless, and I'm wondering how I can get iphones and ipads connected to the internet without prompting for a username and password. Even if it does prompt and we put in our domain credentials, things don't work.. it's like it heavily restricts access. However if you put DOMAINNAME\ in front of your user name, then it seems to work.
Without making static IP reservations and attaching those ip's to no authentication in IronPort... isn't there a way to assign these devices to a policy via their user agent string? Problem is finding that string amongst different versions of iphones and ipads.
I visited www.ipchicken.com on my iphone and it said Browser: Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_2 like Mac OS X; en-us)
AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8H7 Safari/6533.18.5
What part of this do I copy into the user agents field for my no autnentication identity that I'm trying to alter? I tried putting AppleWebKit in, but it still blocks almost everything.
Right now in this Allowed User Agents identiy i have Windows Update checked, as well as these:
(MSOffice\x2014)
Microsoft NCSI
SSLSoapClient
AppleWebKit (does not seem to work)
Thanks for the help!I think I figured it out. Followed this closely:
https://ironport.custhelp.com/cgi-bin/ironport.cfg/php/enduser/std_adp.php?p_faqid=1426&p_sid=ODIeCGuk&p_lva=1713&p_li=cF91c2VyaWQ9MXJvblAwcnQmcF9wYXNzd2Q9Zm8wQmE1
Also do you guys know if the custom user agent field can accept wildcards? Problem is, every version of iOS for iPhone 1, 3G, 3GS, 4, and iPad 1 & 2, or ipod touch (various generations) all have variations in their user strings. If I could just do a blanket statement for like *iphone* , *ipad*, etc.... that would be easier.
So are there any wildcards or txt masks that can be put in and interpreted in the custom user agents field? -
How to retrieve which user-agent in a java portlet?
Is there a way to get http user-agent info about which browser requested a page with a portlet from within the java portlet?
It seems like the request.getHeader() always returns the same value no matter what browser we use.
Have also tried portletRenderRequest.getOriginalHeader() but this method also returns the same result.
Does the PPE replace these headers or what..?
Regards,
Per A JorgensenHi Per A Jorgensen,
I see what you mean. I just deployed a simple portlet which displays the user-agent header property.
Here are my observations:
1. If you access the page as user1 from Mozilla, I see the following:
Browser Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
2. If I now access this page from IE, as user1, then I still see my browser agent as:
Browser Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
3. If I now access this page from IE, as user2, then i see the following details:
Browser Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
4. Now I access the same page from Mozilla (after logging out of user1) as user2, I see the following:
Browser Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) RPT-HTTPClient/0.3-3 RPT-HTTPClient/0.3-3
Hmm.. interesting.. it looks like, whoever access the provider first, fixes the user-agent. I need to investigate more into it to find out information as to why this is happening.
In the mean-time, you can be rest assured that as long as you dont have multiple user's accessing the portlet as the same user, you will get the correct information.
thanks,
Harsha -
How to delete User-Agent header field from http request ?
Hi,
I'm currently using HttpUrlConnection to create a HTTP 1.1 POST client, and I wish to remove the User-Agent field from my request.
However, java seems to set this field to "java.1.4.2" if none is provided.
I have found methods to modify the User-Agent ( "setRequestProperty()" and system property "http.agent" ) but none to delete it.
Is there a way to remove this header from the request ?
This field is said as "should be implemented" but is not required in rfc2616(http1.1), so I'm a bit surprised that I can't remove it in the java HttpUrlConnection...
Thank you for your help,
GregoireYou can always go around java.net.HttpUrlConnection with your own subclass of UrlConnection or simply a socket. You may lose some functionality, for example with handling binary content, but it may still be a solution.
(But are you saying that the server requires that there's no user-agent header? That's not a case of incompatibility, it's a bug. Scrap the server, and get one that works.
It seems a lot more likely that the server just have strict ideas of what user agents it wants to talk to. Then instead of removing the header, you want to find out what values the server will expect.) -
Content repository FD does not exist :user agent sap web application server
Hi All
i am using 3rd party software(dms SERVER) and connecting it using archive link interface SAP HTTP 4.5 AL
i have created a new repository with name FD using tcode OAC0.when i give inputs in OACO and click on test connection it gives me information Content repository FD does not exist
here is my HTTP trace at receiver content server side
TRACE:(5) - GET /Default.aspx?serverInfo&pVersion=0045&contRep=FD HTTP/1.0
TRACE:(5) - user-agent: SAP Web Application Server (1.0;700)
TRACE:(5) - host: SERVERIP:PORT
TRACE:(5) - accept-encoding: gzip
TRACE:(5) -
--> C05 --> S06 ==== (15.583) Request <GET /Default.aspx?serverInfo&pVersion=0045&contRep=FD HTTP/1.0>
--> C05 --> S06 GET /Default.aspx?serverInfo&pVersion=0045&contRep=FD HTTP/1.0
--> C05 --> S06 user-agent: SAP Web Application Server (1.0;700)
--> C05 --> S06 host: SERVERIP:PORT
--> C05 --> S06 accept-encoding: gzip
--> C05 --> S06 ==== Body 0 bytes
--> C05 --> S06 Body =>
Sockets 6 of 4,5,6 need checking ####
TRACE:(6) - HTTP/1.1 200 OK
TRACE:(6) - Cache-Control: private
TRACE:(6) - Content-Length: 189
TRACE:(6) - Content-Type: text/plain; charset=utf-8
TRACE:(6) - Server: Microsoft-IIS/7.5
TRACE:(6) - X-AspNet-Version: 2.0.50727
TRACE:(6) - boundary:
TRACE:(6) - X-dateC: 2010-10-22
TRACE:(6) - X-timeC: 07:07:23
TRACE:(6) - X-dateM: 2010-10-22
TRACE:(6) - X-timeM: 07:07:23
TRACE:(6) - X-contentRep: FD
TRACE:(6) - X-numberComps: 1
TRACE:(6) - X-docId: 0
TRACE:(6) - X-docStatus: online
TRACE:(6) - X-pVersion: 0045
TRACE:(6) - X-ContentServer: contentServer=Server ip;contentServerPort='9025;pVersion='0045';id='DMSSRV1'
TRACE:(6) - X-Powered-By: ASP.NET
TRACE:(6) - Date: Fri, 22 Oct 2010 13:37:23 GMT
TRACE:(6) - Connection: close
TRACE:(6) -
TRACE:(6) - serverType='DMSSRV1';1;serverVersion=12;serverPatch=0;serverBuild=180;pVersion='0045';serverStatus=running;serverStatusDescription=;serverDate='2010-10-22';serverTime='07:07:23';startUpDate='2010-10-22';startUpTime='07:07:23';lastAccessDate='2010-10-22';lastAccessTime='07:07:23';contRep='FD';contRepStatus=defined;contRepStatusDescription=;contRepDescription=Content-Repository Test;contentStorageHost=localhost;contentStorageName=FD;secKeyVerification=y;defaultDocProt=rucd;
one change which i have observed in this trace is .. this trace is showing trace agent as SAP Web application server ... ideally it should show user agent :SAP HTTP
Please suggest me some solution.
Thanks
sandeepDear all,
my issue is resolved.I solved my issue myself
solution: SAP sends HTTP request in the form of URL like
http://serverip:port/GET /Default.aspx?serverInfo&pVersion=0045&contRep=FD HTTP/1.0
Now your response should contain string contRep="FD"
dont forget double quotes on repository name coz SAP program matches string with double quotes. if you will return value like this contRep=FD
this will through error.
Thanks
sandeep sharma -
How to Set User-Agent in UIWebView?
I tried to change User-Agent using NSMutableURLRequest in the UIWebView delegate function, but didn't work. The funny thing is...the User-Agent string changed if the request is redirect. Have anyone experienced it? I want to change User-Agent of every request from UIWebView to the same like coming from Safari browser. Please HELP!!
I would try the Apple Developer Connection, this forum is for users of the iPhone, you aren't going to get much help with this.
-
How to create a mail user agent by using JAVA...
my lecturer has asked me to create a mail user agent by using JAVA , i have no idea how to start this assignment......
What part are you stuck on? Creating a GUI (look at the Swing tutorials), or writing the talk-to-mail-server bit? Look at Java Mail, or the email RFCs.
Maybe you are looking for
-
Error installing Adobe in Program Files... PLEASE HELP!
Hi, I´m trying to install the trial of Adobe CS6 Master Collection (FOR PC) in the folder Program files and I always get this message: "download may fail to this folder due to restrictive access privileges. Please select a different folder." I´ve tri
-
Purchase Requisition restriction at Material Type level
Hi MM Guru's as per Client requirment we want to restrict the Purchase Requisition creation at Material type level (i.e system should raise the error messege when we try to create the PR against Finished Goods) is that possible if yes how can we rest
-
What does clearing cookies and data from iPad 4 mean?
What does clearing cookies and data from iPad 4 mean?
-
I've downloaded Minecraft and Skype and I have a problem.
I've downloade Minecraft and Skype and thet are working fine, I've also "saved" them into my dock, but the I shut down my computer and this apearde instead on the minecraft and skype logo:, and when I have their logo these two guys apear:, is this no
-
How can I get the /opt folder to appear in Finder
I need to paste a file in the /opt folder. I cannot find or see it. I need to copy a http.conf file in there. TextEdit will not let me save as, so that option is out.